416 matches found
CVE-2025-11518
The WPC Smart Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.0.3 via several wishlist AJAX functions due to missing validation on a user controlled key that is exposed when wishlists are shared. This makes it...
CVE-2025-11518
The CVE-2025-11518 issue affects the WPC Smart Wishlist for WooCommerce plugin for WordPress (versions ≤ 5.0.3). It is caused by an Insecure Direct Object Reference due to missing validation on a user-controlled key exposed when wishlists are shared, enabling unauthenticated attackers to manipula...
PT-2025-41649
Name of the Vulnerable Software and Affected Versions WPC Smart Wishlist for WooCommerce plugin for WordPress versions up to and including 5.0.3 Description The software is susceptible to an Insecure Direct Object Reference issue in several wishlist AJAX functions. This is due to a lack of...
EUVD-2025-33575
Newforma Info Exchange NIX uses a hard-coded key to encrypt certain query parameters. Some encrypted parameter values can specify paths to download files, potentially bypassing authentication and authorization, for example, the 'qs' parameter used in '/DownloadWeb/download.aspx'. This key is shar...
CVE-2025-35052
Newforma Info Exchange NIX uses a hard-coded key to encrypt certain query parameters. Some encrypted parameter values can specify paths to download files, potentially bypassing authentication and authorization, for example, the 'qs' parameter used in '/DownloadWeb/download.aspx'. This key is shar...
EUVD-2005-4691
Malware in sbrugna...
EUVD-2007-4405
Malware in sbrugna...
EUVD-2018-20510
Malware in sbrugna...
EUVD-2018-17159
Malware in sbrugna...
EUVD-2020-3595
Malware in sbrugna...
EUVD-2008-4596
Malware in sbrugna...
EUVD-2023-44359
Malicious code in bioql PyPI...
EUVD-2022-30368
Malicious code in bioql PyPI...
EUVD-2022-52269
Malicious code in bioql PyPI...
EUVD-2024-20859
Malicious code in bioql PyPI...
EUVD-2025-23797
Malicious code in bioql PyPI...
EUVD-2023-37705
Malicious code in bioql PyPI...
CVE-2025-34211
Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA and SaaS deployments contain a private SSL key and matching public certificate stored in cleartext. The key belongs to the hostname pl‑local.com and is used by the...
Cisco IOS和Cisco IOS XE Software 授权问题漏洞
Cisco IOS and Cisco IOS XE Software are both products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is a network operating system. An authorization issue vulnerability exists in Cisco IOS and Cisco IOS XE Software that stems from not...
CVE-2025-0663
A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication...